$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: J4GMYWJvuS9x+sV/0DhR+XhgmTs9Y76ji+43rbNoYE0= Subject key identifier: FE:C2:EF:97:26:F4:AB:45:4F:AA:2C:BD:FA:F3:23:18:5B:7C:DA:68 Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 41F4557EBC4E9333211E0DF58C9894495727F1E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 0106 Signing time: Sun 24 Nov 2024 10:31:20 +0000 Manifest this update: Sun 24 Nov 2024 10:26:20 +0000 Manifest next update: Wed 27 Nov 2024 16:34:20 +0000 Files and hashes: 1: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: GqpApCZsTZIotGQu+evDyWElqLkFW0uUDaRgMaB4+Yk=) 2: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: xO1kZQrZJ2Uzb2KKql3ORvfEQsb7SD07YPbbi4hIjF4=) 3: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: oW/3rE8Cks1XxoiBUrrE9hpJZbI18VXj85etX8aBQRQ=) 4: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: KlZJ5jckt5FYQJMvvreG32ZohfgvtBwGxRusjNz2t24=) 5: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: rOrvsqapVd8XY6XV3A85SJQQbPjzrR7RezQToePFDJc=) 6: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: iWAupmsQQLXrigdxxw/IpFgXCPNtccM8s1cNilgGMAM=) 7: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: zXs2GpxNxaEzvODNUbmLdUFNbYuFQWAq+/k2mejeMHU=) 8: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: MKuGnpZ60DSK/b5WEF/hr8uWY44ucZ99U8eaS+KudvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f4:55:7e:bc:4e:93:33:21:1e:0d:f5:8c:98:94:49:57:27:f1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Nov 24 10:26:20 2024 GMT Not After : Nov 27 16:34:20 2024 GMT Subject: CN=FEC2EF9726F4AB454FAA2CBDFAF323185B7CDA68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:55:36:1c:ef:fe:d6:8d:23:a5:0b:18:bd: 8a:f2:c5:e0:0f:15:86:8b:3d:56:2d:7e:75:f9:12: da:57:13:67:73:43:f6:a0:7e:6f:f7:6e:b0:20:ac: fe:2c:f1:5b:33:b9:c9:7f:bd:f5:5e:91:2b:21:e5: 28:00:61:1f:86:5d:d7:2a:15:cf:a2:22:bb:c1:73: fb:54:d5:88:94:78:c6:fc:19:fe:1d:54:b3:d9:0c: d1:bb:af:c5:9e:78:7b:ec:f5:1e:a6:42:11:ec:db: d2:20:9c:3c:72:c3:c1:7f:5a:76:20:da:07:44:ca: b3:a0:60:92:e9:93:f6:64:91:c8:b0:6e:4d:77:83: 5f:4a:5c:e0:f9:99:d4:39:31:4b:8c:f3:53:51:fb: 43:f0:43:df:2c:34:00:2e:49:4f:44:27:aa:72:8d: 41:4c:6c:fb:42:ff:4d:01:43:bf:4a:7d:f4:dd:0b: 80:81:3f:76:5f:d5:83:38:4e:b7:29:ee:cb:59:1d: 52:aa:4a:d9:97:68:bf:19:ac:72:33:72:43:cf:5b: 10:ba:06:de:f9:87:ed:fc:39:1d:a7:09:50:5b:0d: 5c:71:41:e6:3c:d0:5c:5c:b0:98:9e:66:0f:f4:36: 62:2f:ea:7b:bf:54:87:6d:96:a4:cd:f4:9c:d5:e0: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C2:EF:97:26:F4:AB:45:4F:AA:2C:BD:FA:F3:23:18:5B:7C:DA:68 X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:0b:15:6f:03:de:a4:fb:3b:a0:97:6d:f9:fc:d0:b0:d4:9f: 49:3b:43:63:e3:21:7e:9c:72:ea:e6:07:43:67:f5:34:19:94: 4b:14:ba:b3:1b:12:61:19:fb:e9:0f:de:35:4c:97:e7:cb:bb: be:6c:20:90:9a:f8:ce:de:d9:37:62:8e:f1:6b:f0:1c:af:2d: fb:17:93:ff:ea:37:d4:4a:2e:8a:0b:2d:15:be:38:35:29:a6: c6:5d:f2:f3:be:16:93:4c:e9:2e:1f:44:c6:f4:eb:a5:14:6b: 0c:7d:c6:36:58:5e:10:98:d8:77:af:f9:7b:2d:a1:b1:ee:18: 04:7a:c3:02:35:16:90:4d:66:9e:bd:85:fc:9e:ad:d0:53:18: 34:a5:6a:8f:d2:a3:8f:d7:18:41:0c:cf:d3:8d:cb:4e:cf:d8: 9b:9a:a0:8a:5a:b9:7e:33:35:55:5d:4d:e6:16:f1:5d:dd:f6: ef:5f:7c:d6:20:85:ce:75:6d:50:81:96:7c:41:51:07:75:a9: 3a:71:7c:0f:d6:9c:ea:81:69:59:c9:dd:11:fe:6b:83:f7:3b: ab:61:72:73:15:9a:59:7a:b7:c3:9f:fb:37:cf:9f:c8:3b:77: 11:2f:f1:6c:46:05:92:78:94:47:e4:67:fa:08:95:94:0f:15: 94:c6:1a:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfRVfrxOkzMhHg31jJiUSVcn8egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNDExMjQxMDI2MjBaFw0yNDExMjcxNjM0MjBaMDMxMTAvBgNV BAMTKEZFQzJFRjk3MjZGNEFCNDU0RkFBMkNCREZBRjMyMzE4NUI3Q0RBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEF1U2HO/+1o0jpQsYvYryxeAP FYaLPVYtfnX5EtpXE2dzQ/agfm/3brAgrP4s8Vszucl/vfVekSsh5SgAYR+GXdcq Fc+iIrvBc/tU1YiUeMb8Gf4dVLPZDNG7r8WeeHvs9R6mQhHs29IgnDxyw8F/WnYg 2gdEyrOgYJLpk/Zkkciwbk13g19KXOD5mdQ5MUuM81NR+0PwQ98sNAAuSU9EJ6py jUFMbPtC/00BQ79KffTdC4CBP3Zf1YM4Trcp7stZHVKqStmXaL8ZrHIzckPPWxC6 Bt75h+38OR2nCVBbDVxxQeY80FxcsJieZg/0NmIv6nu/VIdtlqTN9JzV4LbLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/sLvlyb0q0VPqiy9+vMjGFt82mgwHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkLFW8D3qT7O6CXbfn80LDUn0k7Q2PjIX6c curmB0Nn9TQZlEsUurMbEmEZ++kP3jVMl+fLu75sIJCa+M7e2TdijvFr8ByvLfsX k//qN9RKLooLLRW+ODUppsZd8vO+FpNM6S4fRMb066UUawx9xjZYXhCY2Hev+Xst obHuGAR6wwI1FpBNZp69hfyerdBTGDSlao/So4/XGEEMz9ONy07P2JuaoIpauX4z NVVdTeYW8V3d9u9ffNYghc51bVCBlnxBUQd1qTpxfA/WnOqBaVnJ3RH+a4P3O6th cnMVmll6t8Of+zfPn8g7dxEv8WxGBZJ4lEfkZ/oIlZQPFZTGGgY= -----END CERTIFICATE-----Generated at Sun Nov 24 11:34:09 2024 by rpki-client on console-fra.rpki-client.org